Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1f/e1ee5b-023b-430a-9c6f-0ee2ea7d4884/1/BGK5tY7gjoPxqa1OlkPoDTtAyz4.mft
File: BGK5tY7gjoPxqa1OlkPoDTtAyz4.mft (raw, json)
Hash identifier: w/6gfWpbqeJC3zQ/v9ifA8PxfJyBLz3twTRusV7RrGM=
Subject key identifier: 41:97:B2:28:41:85:E0:59:E0:71:C1:FB:F7:DB:33:1B:31:6C:93:DC
Authority key identifier: 04:62:B9:B5:8E:E0:8E:83:F1:A9:AD:4E:96:43:E8:0D:3B:40:CB:3E
Certificate issuer: /CN=0462b9b58ee08e83f1a9ad4e9643e80d3b40cb3e
Certificate serial: 019D39AE5EBCC16696F56FD4EF99DC14B8BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BGK5tY7gjoPxqa1OlkPoDTtAyz4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1f/e1ee5b-023b-430a-9c6f-0ee2ea7d4884/1/BGK5tY7gjoPxqa1OlkPoDTtAyz4.mft
Manifest number: 0B61
Signing time: Sun 29 Mar 2026 13:00:21 +0000
Manifest this update: Sun 29 Mar 2026 13:00:21 +0000
Manifest next update: Mon 30 Mar 2026 13:00:21 +0000
Files and hashes: 1: BGK5tY7gjoPxqa1OlkPoDTtAyz4.crl (hash: OOVGMz1UuNk+zkfiJmkhIaZb0Rlc/yTp4EgtoG9GxTE=)
2: v9xxAs53z8-Lo-M8MAasS_fTI5w.roa (hash: W5P7f8MNnL6/RnaFt8r/SNRF065+Vy7YUi1ouIgirhU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1f/e1ee5b-023b-430a-9c6f-0ee2ea7d4884/1/BGK5tY7gjoPxqa1OlkPoDTtAyz4.crl
rsync://rpki.ripe.net/repository/DEFAULT/1f/e1ee5b-023b-430a-9c6f-0ee2ea7d4884/1/BGK5tY7gjoPxqa1OlkPoDTtAyz4.mft
rsync://rpki.ripe.net/repository/DEFAULT/BGK5tY7gjoPxqa1OlkPoDTtAyz4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:ae:5e:bc:c1:66:96:f5:6f:d4:ef:99:dc:14:b8:bf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0462b9b58ee08e83f1a9ad4e9643e80d3b40cb3e
Validity
Not Before: Mar 29 13:00:21 2026 GMT
Not After : Mar 30 13:00:21 2026 GMT
Subject: CN=4197b2284185e059e071c1fbf7db331b316c93dc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:08:0e:26:85:a8:6b:d9:50:4f:5b:a4:a5:1a:
4c:0f:4b:cf:f5:41:95:59:0f:1d:e6:9d:af:01:38:
b6:d9:38:af:7f:df:e6:f8:56:cc:5d:33:b3:c4:2b:
0d:7f:c9:15:bd:2f:3c:f1:98:5c:7f:4a:3f:e2:91:
67:e7:d2:a2:dc:1b:66:d1:46:10:8d:0e:f1:db:b5:
75:22:32:62:5a:d6:90:e2:2a:41:98:ef:ee:ad:de:
27:19:ea:00:18:c3:2b:80:e4:27:ed:78:9e:3e:6f:
72:d0:eb:dc:9f:4b:86:ed:59:b9:8c:ce:46:c4:de:
99:e9:69:c7:77:ea:33:2d:0f:10:15:4a:c0:f4:65:
69:bb:27:0a:d2:fb:f8:dd:4c:50:19:bd:96:51:b5:
5e:d9:b3:c1:49:c0:c1:bb:d9:11:5f:fd:cc:a8:d0:
45:b3:66:72:b7:cd:58:0d:2b:a1:76:c9:e1:2f:78:
f6:d7:6f:7a:f9:32:f4:a0:45:00:cb:0e:41:e9:90:
f3:2c:e6:18:14:38:ec:21:bc:e7:12:40:27:c3:4f:
42:2a:11:17:e7:69:36:5d:fc:3b:03:6c:53:c9:1d:
88:f1:93:ce:2e:2e:95:72:9d:06:67:34:a4:15:56:
18:02:63:09:b5:ca:d2:5e:76:b5:cf:21:14:35:18:
6f:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:97:B2:28:41:85:E0:59:E0:71:C1:FB:F7:DB:33:1B:31:6C:93:DC
X509v3 Authority Key Identifier:
keyid:04:62:B9:B5:8E:E0:8E:83:F1:A9:AD:4E:96:43:E8:0D:3B:40:CB:3E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BGK5tY7gjoPxqa1OlkPoDTtAyz4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/e1ee5b-023b-430a-9c6f-0ee2ea7d4884/1/BGK5tY7gjoPxqa1OlkPoDTtAyz4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/e1ee5b-023b-430a-9c6f-0ee2ea7d4884/1/BGK5tY7gjoPxqa1OlkPoDTtAyz4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bb:1f:6c:30:7d:fe:33:5c:e6:ad:82:c5:dc:1f:bf:14:2d:aa:
fd:3d:17:4a:6b:07:a3:fc:09:3d:e1:21:67:e5:f9:62:0b:87:
82:db:bf:ba:a9:40:2a:19:f9:03:ac:ba:e9:71:3d:78:03:40:
62:7a:a6:cb:1f:85:df:b4:92:85:db:55:2d:d9:df:66:b8:b2:
be:ce:fa:41:98:0a:36:b2:96:76:3d:ac:bf:a2:46:c5:e4:ea:
f2:33:60:8f:69:f2:75:3a:1a:1b:92:d1:79:9b:71:a2:e0:bf:
30:0a:5f:01:27:df:03:f4:03:c7:50:02:f4:88:cd:20:c3:40:
d7:57:8a:e6:0c:06:1b:43:14:d3:eb:c6:d4:4c:7f:f2:65:1d:
55:60:77:d9:52:eb:b3:1a:e6:a1:6a:c3:22:87:e3:6f:e8:87:
74:76:53:6c:76:37:64:fa:6a:2c:d5:67:01:c8:f7:52:35:15:
e4:e8:69:a8:33:34:87:59:71:df:bf:9e:4f:47:81:d8:cb:a0:
73:e5:ef:a1:64:af:c3:65:52:0a:ae:8f:f0:48:56:d1:0f:4e:
9a:48:39:a0:bd:35:ce:0d:73:d1:2f:c6:01:57:81:ed:f2:5b:
54:2e:71:d0:75:cf:04:06:c7:e4:a2:df:0c:c5:4c:b4:43:34:
52:05:8e:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 17:00:49 2026 by rpki-client